TWI478062B - 於特權域中提供基本輸入輸出系統功能之技術 - Google Patents

於特權域中提供基本輸入輸出系統功能之技術 Download PDF

Info

Publication number
TWI478062B
TWI478062B TW101138708A TW101138708A TWI478062B TW I478062 B TWI478062 B TW I478062B TW 101138708 A TW101138708 A TW 101138708A TW 101138708 A TW101138708 A TW 101138708A TW I478062 B TWI478062 B TW I478062B
Authority
TW
Taiwan
Prior art keywords
bios
electronic device
function
request
service
Prior art date
Application number
TW101138708A
Other languages
English (en)
Chinese (zh)
Other versions
TW201329866A (zh
Inventor
Valiuddin Y Ali
Jose Paulo Xavier Pires
James M Mann
Boris Balacheff
Chris I Dalton
Original Assignee
Hewlett Packard Development Co
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hewlett Packard Development Co filed Critical Hewlett Packard Development Co
Publication of TW201329866A publication Critical patent/TW201329866A/zh
Application granted granted Critical
Publication of TWI478062B publication Critical patent/TWI478062B/zh

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/4401—Bootstrapping
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533—Hypervisors; Virtual machine monitors
    • G06F9/45558—Hypervisor-specific management and integration aspects
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G06F21/575—Secure boot
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates
    • G06F8/654—Updates using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533—Hypervisors; Virtual machine monitors
    • G06F9/45558—Hypervisor-specific management and integration aspects
    • G06F2009/45587—Isolation or security of virtual machine instances

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Stored Programmes (AREA)
  • Memory System Of A Hierarchy Structure (AREA)
  • Storage Device Security (AREA)
  • Medicines Containing Antibodies Or Antigens For Use As Internal Diagnostic Agents (AREA)
TW101138708A 2011-10-21 2012-10-19 於特權域中提供基本輸入輸出系統功能之技術 TWI478062B (zh)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/US2011/057258 WO2013058766A1 (en) 2011-10-21 2011-10-21 Providing a function of a basic input/output system (bios) in a privileged domain

Publications (2)

Publication Number Publication Date
TW201329866A TW201329866A (zh) 2013-07-16
TWI478062B true TWI478062B (zh) 2015-03-21

Family

ID=48141214

Family Applications (1)

Application Number Title Priority Date Filing Date
TW101138708A TWI478062B (zh) 2011-10-21 2012-10-19 於特權域中提供基本輸入輸出系統功能之技術

Country Status (9)

Country Link
US (1) US9753738B2 (pt)
JP (1) JP5885851B2 (pt)
CN (1) CN103890717B (pt)
BR (1) BR112014009445B1 (pt)
DE (1) DE112011105745B4 (pt)
GB (1) GB2510281B (pt)
IN (1) IN2014DN03052A (pt)
TW (1) TWI478062B (pt)
WO (1) WO2013058766A1 (pt)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10867045B2 (en) 2015-09-30 2020-12-15 Hewlett-Packard Development Company, L.P. Runtime verification using external device

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE112011105752T5 (de) * 2011-10-21 2014-10-02 Hewlett-Packard Development Company, L.P. Webbasierte Schnittstelle zum Zugriff auf eine Funktion eines Basic Input/Output-Systems
GB2531844B (en) * 2014-10-31 2019-06-26 Hewlett Packard Development Co Hardware-protective data processing systems and methods using an application executing in a secure domain
US9740492B2 (en) * 2015-03-23 2017-08-22 Intel Corporation System management mode trust establishment for OS level drivers
US10095891B2 (en) * 2015-06-08 2018-10-09 Nuvoton Technology Corporation Secure access to peripheral devices over a bus
EP3220262B1 (en) * 2016-03-15 2018-06-13 Axis AB Device which is operable during firmware upgrade
US10838707B2 (en) 2018-07-20 2020-11-17 Dell Products L.P. Runtime update of intel server platform services' node manager settings in bios EEPROM
DE112019003920T5 (de) * 2018-08-03 2021-05-20 Nvidia Corporation Sicherer zugriff auf speicher einer virtuellen maschine
CN110096888B (zh) * 2019-04-18 2021-02-09 苏州浪潮智能科技有限公司 一种加快验证及分析smm安全隐患的方法及系统
US11847483B2 (en) * 2020-12-03 2023-12-19 International Business Machines Corporation Secure virtual machine software management

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TW200931315A (en) * 2008-01-09 2009-07-16 Inventec Corp A verification method for the update content of BIOS
TW200941349A (en) * 2008-01-22 2009-10-01 Advanced Micro Devices Inc Alternate address space to permit virtual machine monitor access to guest virtual address space
CN101599022A (zh) * 2009-07-07 2009-12-09 武汉大学 用于虚拟机系统的可信计算基裁剪方法
US20100115315A1 (en) * 2008-11-04 2010-05-06 Lenovo (Singapore) Pte. Ltd. Establishing power save mode in hypervisor system
US20110035532A1 (en) * 2009-08-07 2011-02-10 International Business Machines Corporation Secure Recursive Virtualization

Family Cites Families (47)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5063496A (en) 1988-06-01 1991-11-05 International Business Machines Corporation Signaling attempted transfer to protected entry point bios routine
US6081664A (en) 1996-09-30 2000-06-27 Intel Corporation Method for monitoring a BIOS
US6401198B1 (en) * 1999-03-09 2002-06-04 Texas Instruments Incorporated Storing system-level mass storage configuration data in non-volatile memory on each mass storage device to allow for reboot/power-on reconfiguration of all installed mass storage devices to the same configuration as last use
TW448406B (en) 1999-10-19 2001-08-01 Inventec Corp BIOS updating method performed through the network
US6711675B1 (en) * 2000-02-11 2004-03-23 Intel Corporation Protected boot flow
US7213152B1 (en) 2000-02-14 2007-05-01 Intel Corporation Modular bios update mechanism
US7370324B2 (en) 2003-09-30 2008-05-06 Intel Corporation Switching between a service virtual machine and a guest virtual machine in a virtual machine monitor environment
US7930378B2 (en) * 2003-12-24 2011-04-19 Intel Corporation Method to support XML-based consoles in pre-boot and post operating system execution environments
US7234054B2 (en) 2004-02-09 2007-06-19 Intel Corporation Method and apparatus for enabling platform configuration
TWI231427B (en) 2004-03-04 2005-04-21 Quanta Comp Inc Method and system for controlling remote computers
CN1680920B (zh) 2004-04-07 2011-06-15 纬创资通股份有限公司 远端更新数据处理系统中基本输入输出系统的方法及其装置
US7418584B1 (en) * 2004-05-11 2008-08-26 Advanced Micro Devices, Inc. Executing system management mode code as virtual machine guest
US7797707B2 (en) 2005-03-02 2010-09-14 Hewlett-Packard Development Company, L.P. System and method for attributing to a corresponding virtual machine CPU usage of a domain in which a shared resource's device driver resides
US8799891B2 (en) 2005-03-02 2014-08-05 Hewlett-Packard Development Company, L.P. System and method for attributing CPU usage of a virtual machine monitor to a corresponding virtual machine
US7334076B2 (en) * 2005-03-08 2008-02-19 Microsoft Corporation Method and system for a guest physical address virtualization in a virtual machine environment
US20070169076A1 (en) 2005-10-28 2007-07-19 Desselle Bernard D Methods and systems for updating a BIOS image
US7676666B2 (en) 2006-02-02 2010-03-09 Dell Products L.P. Virtual BIOS firmware hub
CN100561923C (zh) 2006-02-28 2009-11-18 联想(北京)有限公司 一种bios刷新升级的系统和方法
CN101034994A (zh) 2006-03-07 2007-09-12 环达电脑(上海)有限公司 基于远程的bios刷新方法
JP4358217B2 (ja) * 2006-10-31 2009-11-04 株式会社東芝 キャッシュサーバ、ネットワークブート方法、及びプログラム
US7779243B2 (en) 2006-12-29 2010-08-17 Intel Corporation Dual operating system computing system
WO2008149412A1 (ja) 2007-06-04 2008-12-11 Fujitsu Limited 情報処理装置、情報処理装置の制御方法及びコンピュータプログラム
US7925802B2 (en) 2007-06-21 2011-04-12 Seamicro Corp. Hardware-based virtualization of BIOS, disks, network-interfaces, and consoles using a direct interconnect fabric
TW200907804A (en) 2007-08-15 2009-02-16 Inventec Corp Method for updating BIOS and computer and system using the same
US7809985B2 (en) * 2007-09-28 2010-10-05 Microsoft Corporation Offline hardware diagnostic environment
US8281303B2 (en) * 2007-10-31 2012-10-02 Hewlett-Packard Development Company, L.P. Dynamic ejection of virtual devices on ejection request from virtual device resource object within the virtual firmware to virtual resource driver executing in virtual machine
JP4982347B2 (ja) * 2007-12-11 2012-07-25 株式会社東芝 画像情報の更新を検出するプログラム、方法および画像処理装置
US7987353B2 (en) 2008-01-09 2011-07-26 International Business Machines Corporation Remote BIOS for servers and blades
US20090193106A1 (en) 2008-01-24 2009-07-30 Christophe Bouten System and method for managing message transport in a virtual environment
US8117435B2 (en) * 2008-06-30 2012-02-14 Intel Corporation Method and system for secured dynamic bios update
CA2732830C (en) 2008-08-08 2016-01-19 Absolute Software Corporation Secure computing environment to address theft and unauthorized access
WO2010037022A1 (en) 2008-09-26 2010-04-01 Fuhu, Inc. Hypervisor and webtop in a set top box environment
US8205197B2 (en) * 2008-11-12 2012-06-19 Lenovo (Singapore) Pte. Ltd. Apparatus, system, and method for granting hypervisor privileges
US20100161844A1 (en) 2008-12-23 2010-06-24 Phoenix Technologies Ltd DMA compliance by remapping in virtualization
US8799691B2 (en) 2009-01-07 2014-08-05 Hewlett-Packard Development Company, L.P. Hierarchical power management
US8166288B2 (en) 2009-01-30 2012-04-24 Hewlett-Packard Development Company, L.P. Managing requests of operating systems executing in virtual machines
US20100205420A1 (en) 2009-02-09 2010-08-12 Inventec Corporation System and method for realizing remote test on computer apparatus without storage device
US8069228B2 (en) * 2009-05-08 2011-11-29 Hewlett-Packard Development Company, L.P. Preventing access of a network facility in response to an operation
US8397167B2 (en) 2009-08-18 2013-03-12 Dell Products, Lp System and method for a remote console preview of a server
US8918779B2 (en) 2009-08-27 2014-12-23 Microsoft Corporation Logical migration of applications and data
CN101751284B (zh) * 2009-12-25 2013-04-24 华为技术有限公司 一种分布式虚拟机监控器的i/o资源调度方法
US9003001B2 (en) 2010-03-15 2015-04-07 Cisco Technology, Inc. Bios parameter virtualization via BIOS configuration profiles
US8589702B2 (en) * 2010-05-28 2013-11-19 Dell Products, Lp System and method for pre-boot authentication of a secure client hosted virtualization in an information handling system
CN103329095B (zh) 2011-01-28 2017-03-22 惠普发展公司，有限责任合伙企业 用编码的信息验证管理程序
WO2013032495A1 (en) 2011-08-30 2013-03-07 Hewlett-Packard Development Company , L.P. Communication with a virtual trusted runtime bios
CN103827811A (zh) 2011-09-30 2014-05-28 惠普发展公司，有限责任合伙企业 管理基本输入/输出系统（bios）的访问
DE112011105752T5 (de) 2011-10-21 2014-10-02 Hewlett-Packard Development Company, L.P. Webbasierte Schnittstelle zum Zugriff auf eine Funktion eines Basic Input/Output-Systems

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TW200931315A (en) * 2008-01-09 2009-07-16 Inventec Corp A verification method for the update content of BIOS
TW200941349A (en) * 2008-01-22 2009-10-01 Advanced Micro Devices Inc Alternate address space to permit virtual machine monitor access to guest virtual address space
US20100115315A1 (en) * 2008-11-04 2010-05-06 Lenovo (Singapore) Pte. Ltd. Establishing power save mode in hypervisor system
CN101599022A (zh) * 2009-07-07 2009-12-09 武汉大学 用于虚拟机系统的可信计算基裁剪方法
US20110035532A1 (en) * 2009-08-07 2011-02-10 International Business Machines Corporation Secure Recursive Virtualization

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10867045B2 (en) 2015-09-30 2020-12-15 Hewlett-Packard Development Company, L.P. Runtime verification using external device

Also Published As

Publication number Publication date
BR112014009445A2 (pt) 2017-04-25
GB201406678D0 (en) 2014-05-28
US9753738B2 (en) 2017-09-05
GB2510281B (en) 2020-08-12
BR112014009445B1 (pt) 2021-10-13
DE112011105745B4 (de) 2021-09-23
CN103890717A (zh) 2014-06-25
JP2014531083A (ja) 2014-11-20
CN103890717B (zh) 2018-03-27
JP5885851B2 (ja) 2016-03-16
US20140281469A1 (en) 2014-09-18
GB2510281A (en) 2014-07-30
DE112011105745T5 (de) 2014-08-14
TW201329866A (zh) 2013-07-16
WO2013058766A1 (en) 2013-04-25
IN2014DN03052A (pt) 2015-05-08

Similar Documents

Publication Publication Date Title
US9753742B2 (en) Web-based interface to access a function of a basic input/output system
TWI478062B (zh) 於特權域中提供基本輸入輸出系統功能之技術
KR102110273B1 (ko) 체인 보안 시스템들
JP5972924B2 (ja) Ｔｐｍアクセスを仮想化するシステム
TWI464680B (zh) 運算系統、電腦可讀媒體、及用以保全與虛擬受信賴運作時間基本輸入輸出系統之通訊之方法
Li et al. A trusted virtual machine in an untrusted management environment
US8953806B2 (en) Method and apparatus for remotely provisioning software-based security coprocessors
JP6063941B2 (ja) システム管理要求のための仮想高特権モード
US7636442B2 (en) Method and apparatus for migrating software-based security coprocessors
US20060256107A1 (en) Methods and apparatus for generating endorsement credentials for software-based security coprocessors
US20060256105A1 (en) Method and apparatus for providing software-based security coprocessors
JP2008171389A (ja) ドメイン・ログオンの方法、およびコンピュータ
Mirzamohammadi et al. Ditio: Trustworthy auditing of sensor activities in mobile & iot devices
JP2021519564A (ja) セキュアコンピュータシステム
Pontes et al. Attesting AMD SEV-SNP Virtual Machines with SPIRE
Pedone et al. Trusted computing technology and proposals for resolving cloud computing security problems
Sunitha A Survey on Securing the Virtual Machines in Cloud Computing
TWI603221B (zh) 路由器及虛擬受信賴運作時間基本輸入輸出系統
Pontes et al. Interoperable node integrity verification for confidential machines based on AMD SEV-SNP
Butler Leveraging Emerging Disk Functionality for New Security Services

Legal Events

Date Code Title Description
MM4A Annulment or lapse of patent due to non-payment of fees